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ABSTRACT 


Security and intelligence organizations have challenges in information sharing 
have resulted in incomplete information. Since 2001 state and local governments 
in the United States have formed information sharing hubs called fusion centers 
which request information from peer fusion centers as well as sharing situation 
reports about emerging and ongoing security situations. The requests for 
information (RFI) and situation awareness reporting processes are manual and 
occur without data standards or process standards. Public sector and private 
sector information sharing systems utilized both process and data standards to 
automate routine information sharing between organizations like those 
exchanges between fusion centers. These standards are coupled with 
information sharing tools that better enable consumer services, such as 
searching and booking airline travel through on-line systems, exchanges of 
criminal justice information using the National Information Exchange Model 
(NIEM) and sharing of patient and medical information utilizing the Health 
Information Exchange (HIE). 

This thesis combines the process and tools from both the public and 
private sector’s data and process standards and the use of information sharing 
tools to propose a conceptual national intelligence-sharing model (NISM). SMEs 
from the intelligence, counterterrorism and technology communities, within the 
fusion center environment, were used to review, modify, and validate NISM. 
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I. INTRODUCTION 


A. PROBLEM STATEMENT 

Inter-organizational information sharing between and amongst local, state 
and federal agencies is necessary to ensure the security of the United States. As 
discovered by the 9/11 Commission, many local, state and federal agencies 
failed to share information on a regular basis (National Commission on Terrorist 
Attacks, 2004). While the 9/11 Commission was conducting its study, states and 
urban areas were already forming fusion centers, which later came to be the 
decentralized network the Commission recommended in its 2004 report. Fusion 
centers are to serve as information-sharing mechanisms for public safety 
personnel from local, state, and federal agencies. Today, every U.S. state and 
several urban areas have formed fusion centers. In 2007, the White House 
published the National Strategy for Information Sharing, which concluded “state 
and major urban area fusion centers represent a valuable information-sharing 
resource and should be incorporated into the national information-sharing 
framework” (National Strategy for Information Sharing, 2007, p. 3). Additionally, 
the White House builds on the Commissioners’ recommendation, and in 2010, 
with the National Security Strategy, and in 2012, with the National Strategy for 
Information Sharing and Safeguarding by calling for leveraging the information 
provided by the national network of fusion centers (The White House, 2010, 
2012 ). 

Fusion centers are defined for this work as the 77 state and local 
coordinated information and intelligence centers, as well as the federally 
coordinated mission-specific intelligence centers, such as the National 
Counterterrorism Center (NCTC), El Paso Intelligence Center (EPIC), and others. 
These centers utilize the intelligence cycle to process information on many types 
of criminal activity ranging from property crimes to terrorism. The intelligence 
cycle (Figure 1), as defined by the National Criminal Intelligence Sharing Plan, is 
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comprised of six processes: (1) planning and direction, (2) collection, (3) collation 
or processing, (4) analysis, (5) dissemination, and (6) reevaluation (U.S. 
Department of Justice, 2005). 


Intelligence Process 



Figure 1. Intelligence Cycle—National Criminal Intelligence Sharing Plan (From 

U.S. Department of Justice, 2005) 

The collection, collation, and dissemination steps are performed several 
times each day by local, state, and federal fusion centers that routinely exchange 
information with one another. The analysis step is designed to interrogate further 
the information and refine the conclusions and impacts. Also, in the analysis 
step, information reliability judgments can be considered. The collection and 
collation steps rely on Request for Information (RFI) processing, and the 
dissemination step is partially completed through sharing information on 
emerging or on-going situations or events. These daily steps are performed and 
processed without universal guidelines, standards, or protocols. The following is 
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an example of an Illinois RFI, which illustrates how the process works today and 
how today’s processes can lead to missing or overlooked information and 
requires significant personnel resources to complete. 

1. Today’s RFI Process 

Investigators in a narcotics task force who are performing a search 
warrant at a residence where narcotics were being distributed initiate an example 
of a routine RFI in Illinois. The mobile telephone of the target of the investigation 
is seized (under the proper legal guidelines) and reviewed for evidentiary and 
intelligence value. The target’s telephone contains names and associated 
telephone numbers with area codes throughout the country. A message is sent 
from the narcotics task force investigators to the Illinois fusion center, called the 
Statewide Terrorism and Intelligence Center (STIC), requesting further 
information on these names and telephone numbers. The STIC then sends a RFI 
to other state fusion centers associated with those area codes. This RFI is likely 
communicated using electronic mail (Email), is comprised of unstructured text, 
contains some background information on the investigation, and requests fusion 
centers to comply with a specific request. This Email is sent to a general fusion 
center Email in-box and is processed by fusion center personnel. Generally, the 
answering fusion center will reply to the original Email, containing the RFI, with 
any information available from their resources. An analyst or officer at the STIC 
combines all the information received from the other fusion centers (collation), 
and removes any redundant information. Once the collation process is 
completed, the analyst begins to analyze the resulting data. The collection and 
collation process could take an hour or days depending on the volume of 
information requested and the number of organizations involved in the original 
RFI, other requests or reports coming into the STIC, or incidents occurring in the 
other jurisdictions. Each center handles these RFIs differently and constructing 
the national answer about a target of an investigation is time consuming. The 
STIC processes more than 30,000 RFIs a year and rely on responses to these 
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RFIs for the majority of the requests processed. Collating the results of these 
30,000 RFIs is generally performed using word processing software. 

2. Sharing Information during Emerging Incidents 

One of the core missions of a fusion center is to share information during 
emerging or on-going situations or events. The national network of fusion centers 
relies on information from the other centers during emerging situations to assess 
the impact on their geographical area and to have situational awareness. During 
emerging situations, the information can be scarce, incorrect, and dynamic for 
hours or days. Often early situational reporting during emerging incidents is 
incorrect. Today, the process for sharing information during emerging situations 
is similar to that of the RFI. This fictional example will illustrate the process during 
a mass causality situation. 

The Illinois STIC has learned of a shooting at a place of worship in Illinois. 
STIC personnel would gather as much information as possible about the event 
from public safety and publically available sources to include internal reporting in 
databases or systems available to the STIC personnel, as well as open sources, 
such as the news media. As soon as possible, a STIC staff member sends an 
Email to the other fusion centers’ Email accounts throughout the nation. This 
message would include the date and time of occurrence, location, numbers of 
victims, location and type of place of worship, time, date and current situation, a 
narrative of the situation, and possibly, the classification, source, and handling 
instructions for the information. As the STIC learns more about the subject, future 
messages are issued in the same fashion correcting or updating the previous 
message. The STIC has flexibility in how it shares the information and can 
choose what information to share, how the information is shared, with what 
organizations it is shared, and other variables. Likewise, the STIC can choose to 
issue updates whenever it prefers to do so, or for that matter, not issue an 
update at all. 
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The fusion center inter-organizational work that has been done has 
blocked the creation of intelligence web-portals or online libraries of finished or 
final intelligence products. Some of these efforts have been successful, such as 
the Homeland Security Information Network Intelligence (HSIN-Intel), but even 
HSIN-Intel stops short of creating a national RFI network or shared situational 
awareness. To date, fusion center information sharing efforts have used federally 
driven, top-down models in which the fusion center must adopt a particular 
federal system or network. This practice requires the 77 state and local fusion 
centers to adopt each of the federal agencies’ systems, which results in 
redundant reporting and inefficiency. 

B. RESEARCH QUESTION 

How can existing public and private sector mechanisms be used to 
enhance domestic information collection, collation or processing, and 
dissemination? 

Specifically, how can existing technical processes, tools, and data 
standards from the public and private sectors enhance domestic information 
collection, collation or processing, and dissemination? 

C. HYPOTHESIS ARGUMENTS 

This work proposes the creation of data and process standards to create a 
single act of publication and collation for requesting information and sharing 
information about on-going situations. The sender would use an established 
template for dissemination and responding to national RFIs and a similar 
template for sharing information during an emerging situation. The recipient 
would subscribe to these standardized feeds of information to enable recipient IT 
systems to route, filter, and process the information according to their mission 
and needs. Responses would be guided by similar standards to enable threaded 
display and automated collation. 
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1. Improvements to Request for Information (RFI) and Situational 
Awareness Reporting 

The current RFI and shared situational awareness processes between 
intelligence organizations in the United States can be improved by leveraging the 
lessons learned and work done in the private sector with regards to business to 
business (B2B) collaborative techniques. Similar B2B collaborations exist in 
continuous replenishment programs (CRP) and electronic data interchange 
(EDI), wherein two firms have pre-established information sharing arrangements. 
These arrangements exist within inventory and ordering systems and are used 
by large U.S. retailers to exchange information with product suppliers (Lefebvre, 
2003). Connecting systems in this manner would eliminate the present need for 
manual interpretation at each fusion center upon the receipt and dispatch of 
information and would allow for a more efficient process overall by allotting more 
time for the analysis of collated materials and providing a more comprehensive 
collection of materials. 

The RFI process is similar to an inventory linkage, wherein one system is 
asking another a question. In the case of a fusion center, a national query or RFI 
would be published using standard fields derived from the National Information 
Exchange Model (NIEM). This RFI would trigger a query in the other fusion 
center’s intelligence systems and automatically supply a response. These RFIs, 
and the replies or responses, would require an establishment of standard data 
fields. Each fusion center would not need to adopt a national system, but instead 
would use the intelligence systems they currently employ and publish the RFI to 
the national standard. 

Using the same principles, government organizations can share 
information about emerging and on-going situations with others involved or 
interested organizations far more efficiently. Like the RFI process, each center 
would use its own system to report situations, and this dynamic exchange would 
be digested by each organization to create national shared situational 
awareness. 
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2. Significance of Research 

This research will contribute to the literature resources available to 
domestic intelligence policy makers, as well as many organizations and 
communities of interest. These interested organizations consist of the federal 
intelligence community, the federal law enforcement, and intelligence gathering 
and analysis organizations, the Director of National Intelligence, the state and 
local fusion center community, intelligence analysts and officers, and government 
technology contractors. The findings and recommendations pursuant to this 
research provide policy makers, planners, and technology experts with a partially 
vetted concept, with considerations, and challenges for implementation. Lastly, a 
partial implementation is underway and at the end of this work, a summary of the 
current status is outlined. 

D. CHAPTER OVERVIEW 

This work examines the literature available regarding both public and 
private sector information sharing systems and yields a conceptual model (the 
National Intelligence Sharing Model or NISM) for processing RFIs and sharing 
situation reports. Outlined in the current literature (Chapter II) are the data 
standards, process standards, and information sharing tools used in the private 
and public sectors that are then examined for fit within state and local fusion 
centers. 

Chapter III explains the method utilized for vetting the model wherein four 
subject matter experts (SMEs) were interviewed. These experts were asked 
about what standards, automated processes, and tools are available to enhance 
information exchanges. Additionally, they were asked to evaluate the challenges 
of implementing the NISM, and what these efficiencies in RFI processing and 
situation reporting would bring in the way of additional time available towards 
strategic intelligence. Those interviewed raised additional issues to be 
investigated upon future research. Chapter IV takes into consideration the expert 


7 



responses to the conceptual NISM, and proposes changes or alterations to the 
conceptual NISM. The findings, conclusions, and recommendations are 
summarized in Chapter V. 
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II. LITERATURE 


Information sharing, including inter-organizational information sharing, has 
been accomplished by private and public organizations alike. Inter-organizational 
information sharing is enabled by several factors, three of which are data 
standards, process standards, and information sharing tools. The following 
outlines examples of each of these in both private and public organizations. 

A. PUBLIC SECTOR INFORMATION SHARING 

The Government Accountability Office (GAO) report from April 2007 
concludes 17 major information-sharing networks are in use by the Department 
of Homeland Security (DHS) and the Department of Justice (DOJ) (U.S. 
Government Accountability Office, 2007). Additionally, these networks cost 
$893.1 million to operate in 2005 and 2006. Many of these networks are used for 
in-house communications and are not available to other organizations or 
communities. Two networks are available to federal, state and local communities: 
the Homeland Security Information Network (HSIN), and the Law Enforcement 
Online (LEO). Each portal, as they are commonly called, creates national web- 
based libraries for sharing finished intelligence products. The HSIN is operated 
by the DHS, and LEO is operated by the DOJ. Other networks are emerging in 
the information-sharing space from the DHS Federal Protective Service (FPS), 
and the Federal Bureau of Investigation’s (FBI’s) e-Guardian program. In 2011, 
the GAO recommended an information-sharing environment (ISE) for the 
exchange of terrorism-related information (Larence, 2011). 

1. Homeland Security Information Network (HSIN) 

The HSIN brand is divided into two parts, HSIN and HSIN-Intel. The larger 

HSIN is devoted to information sharing amongst the public safety community, 

which includes law enforcement, emergency management, critical infrastructure, 

and others. The HSIN-Intel program serves the state and local fusion center 

community. Both programs are web-portals with document libraries and 
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embedded communication capabilities. The portals are searchable, and in the 
HSIN-Intelligence portal, advanced storage abilities exist to limit document 
audience. In addition to document sharing, as well as secure messaging and 
chat, other features are also available. The HSIN offers a situational awareness 
tool called the Common Operational Picture (COP), has integrated mapping 
capability through the Integrated Common Analytical Viewer (iCAV), and utilizes 
Adobe Connect software for facilitating real-time meetings and collaboration. The 
HSIN program costs approximately $21 million to operate annually (U.S. 
Government Accountability Office, 2008). In May 2013, the HSIN program 
transitioned to what is called HSIN Release 3 or HR3. This system made 
technological and user interface improvements, as well as included a secure 
messaging capability for the HSIN-Intelligence user base (Office of Inspector 
General, 2013). 

2. Law Enforcement Online (LEO) 

The major initiative in the DOJ for information sharing is LEO, which 
operates similar to HSIN and provides some of the same functionality by offering 
secure messaging and mission specific online portals for communities of interest 
to post information. LEO’s encryption package is used to verify users of other 
systems, such as National Data Exchange (N-DEx), and operational law 
enforcement deconfliction systems. In addition to web-portals, LEO offers 
encryption for access to the national deconfliction network (RISSSafe) and 
Virtual Command Center (VCC), which is a web-based incident management tool 
(U.S. Government Accountability Office, 2007). 

The 9/11 Commissioners recommended that the President be responsible 
for coordinating issues to ultimately “create a trusted information network” 
(National Commission on Terrorist Attacks, 2004, p. 418). In August 2004, the 
President issued Executive Order 13356 that directed federal organizations to 
give information sharing and counter-terrorism the highest priority. Executive 
Order 13356 also provided direction to federal entities to share information with 
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state and local authorities. It specifically directed the Intelligence Community (1C) 
to create intelligence reports and summaries at the classification level to be 
accessible by the state and local jurisdictions. The National Strategy for 
Information Sharing (NSIS) builds on the concept above, and charges state and 
local fusion centers with establishing protocols to handle bi-directional situational 
awareness reporting to local jurisdictions, the private sector, and the federal 
government (National Strategy for Information Sharing, 2007). The 2010 National 
Security Strategy stresses timely information exchanges and suggests the 
development of the national fusion center network should be further leveraged 
(The White House, 2010). This strategy proposes an “integrated approach to 
information systems” through “collaboration across government” (The White 
House, 2010, p. 51). 

Following 9/11, U.S. government organizations were given clear direction 
and legislative authorities. These new strategies and laws created several 
organizations and systems designed to improve information sharing. Additionally, 
the leaders of government agencies were directed to make information sharing a 
priority and to create protocols and formalized processes for sharing information 
with state and local partners. 

B. PRIVATE SECTOR INFORMATION SHARING 

Some private sector firms have accomplished inter-organizational 
information sharing as well. Participating organizations use several mechanisms 
to share information. These mechanisms allow firms to share real-time 
information about issues ranging from ordering and reordering, as well as 
inventory levels to other logistics, such as delivery dates, shipment locations, and 
details about transportation. 

The private sector uses B2B collaboration techniques to facilitate 
transactions between organizations. Examples of these transactions include, 
ordering and reordering, invoicing and payments, and shipping and logistical 
exchanges. These transactions are routine and inter-organizational information 
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sharing can enable the automation of work (Barratt, 2004). Technologies allow 
firms to collaborate electronically and automate exchanges, which previously 
required human attention (Attaran & Attaran, 2007). Some forms of B2B 
collaboration are called CRP, EDI and collaborative planning, forecasting, and 
replenishment (CPFR). 

CRP represent inter-organizational information sharing, wherein two firms’ 
systems tightly collaborate. One example of a CRP system is the reordering 
process between a retailer and wholesaler. The two firms’ inventory and ordering 
systems are linked and these systems automatically share information and act 
upon pre-defined rules. Once the first order has been placed, terms agreed upon, 
and the inventory and ordering systems linked between firms, the CRP is 
automatically sharing information and the replenishment or reordering of the item 
is performed, (Attaran & Attaran, 2007)which is an example of tightly coupled 
collaboration between firms. 

An information broker between firms enables information sharing using 
EDI techniques. By using an EDI, firms are able to share invoices, inventory 
levels, and other information by publishing the information (using data standards) 
to a service shared by both firms. For example, one firm places an order using its 
internal system, the order is transmitted to the EDI, and it routes the order to the 
seller. EDI, fueled by the Internet, has continued to improve and become 
economically beneficial (Attaran & Attaran, 2007). EDI techniques in public health 
settings have proven efficient in exchanging information (U.S. Government 
Accountability Office, 2010). The EDI used by a U.S. State Department of Public 
Health provided immediate access to condition information and supported early 
detection of H1N1 cases and was valuable (U.S. Government Accountability 
Office, 2010). Figure 2 illustrates the EDI model for information sharing in a 
public health and medical environment. This model makes use of data standards 
and process standards to facilitate the timely and efficient exchanges of health 
information between health care providers. 
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Providers Disclosing 


Providers Requesting 

Patient Data 


and Receiving Data 



Physicians' 

Offices 


Public Health 
Depart ment 


Figure 2. Health Information Exchange Model (From U.S. Government 

Accountability Office, 2010, p. 6) 


CPFR is an example of advanced inter-organizational information sharing. 
Whereas EDI and CRP focus on automating repeating functions, in a CPFR 
situation, several parts of the supply chain are part of the collaboration. CPFRs 
enable information sharing on inventory, point of sale data, promotions, orders, 
shipments and production, and sales forecasts. These systems enable 
information sharing from the early stages of inter-firm arrangements to the sales 
and replenishments phases. 

The private sector relies on B2B collaboration techniques to share 
information between firms. These techniques include connecting firms to 
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automate a singular piece of work between them, using inter-organizational 
services to link firms together, and sharing information throughout several 
phases of supply chain process. These programs are designed to enable 
information exchanges inside supply chains where prearranged rules (price, 
packaging and others) exist (Attaran & Attaran, 2007). 

C. PRIVATE SECTOR DATA STANDARDS 

Information sharing in private and public organizations, in some 
circumstances, relies on common data standards. Researchers Cirincione and 
Bacharach (2007) state, “data standards represent agreement” (, p. 136). These 
agreements enhance information exchanges by creating an agreed framework in 
the way of data fields and labels. Ciricione and Bacharach (2007) summarize the 
need to create data standards in the private sector as follows: 

When different companies use similar data field naming 
conventions to handle the same type of information, they are freed 
from the requirement to develop costly, dedicated data conversion 
systems in order to interface with other businesses in the same 
industry. Such interfacing has become a priority in the industry as 
its continuing integration with the public capital markets has 
increased the pressure for rapid, consistent, and accurate transfers 
of data. (p. 129) 

Private sector firms have created standards in many business markets, including 
health care, real estate, and travel industries, to enable and enhance inter¬ 
organizations information sharing. 

The health and medical communities employ the Public Health Data 
Standards Consortium (PHDSC), which has created data standards for many 
exchanges involving health care information. Seventeen data standards create 
uniformity in data ranging from hospital bed availability to payer typology. One 
such standard in the medical community is used for uniform billing. The health 
and medical communities, and specifically, health care providers and payers, use 
this standard, named UB-92 (seen in Figure 3), for processing health care claims 
(American Hospital Association, 2009). The patient or client completes the form 
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for the health care provider and the information necessary to process the 
payment is shared with the claims organization, the provider, the insurance 
industry, and other relevant parties. The Health Information Exchange (HIE) 
provides similar standards in support of the Health Information Technology for 
Economic and Clinical Health (HITECH). The HITECH creates a standards- 
based electronic exchange of health and patient information for use by private 
(hospitals, health care providers, and physicians) and public organizations (public 
health agencies) (Department of Homeland Security, Office of Inspector General, 
2013). Incentives in the form of grant opportunity and claims of efficiencies are 
designed to attract the public and private organizations’ participation (U.S. 
Governmental Accountability Office, 2010). 
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UB92 Claim Form 



Figure 3. UB92 Claim Form (From National Uniform Billing Committee, n.d.). 


Similar standards exist in the real estate industry. Like other enterprises, 

the real estate industry does not stand alone. Realtors, lenders, appraisers, titling 

organizations, insurance companies, and others rely on information shared 

between one another. Inter-organizational information sharing in these industries 
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also relies on data standards. The Real Estate Transaction Standard (RETS) 
provides these standards for the real estate industry. One such standard 
provided by RETS enables inter-organizational information sharing between 
realty firms and multiple listing services (MLS). For instance, when using data 
standards in RETS, realtors can upload a new listing or edit an existing listing 
using their individual system and export a listing to an affiliated MLS (Real Estate 
Transaction Standard, 2009). The RETS utilizes 140 common fields (shown 
partially in Figure 4) used by many of the more than 800 MLSs (National 
Association of Realtors, 2007). 


IStandardName 

Element 

Attribute 

Type 

Value 

Description 

School.Primary 

Primary 


Text 

The name of the primary school having a catchment area that includes the 
associated property. 

School.JrHigh 

JrHigh 


Text 

The name of the jrhigh school having a catchment area that includes the 
associated property. 

BedRoom 

BedRoom 


Container 

Information about specific bedrooms within a single-family property or a 
single unit of a multi-family property 

BedRoom. Master 

MasterBedroom 


Container 

The Geometric description of a Master Bedroom within a single-family 
property or a single unit of a multi-family property. The definition of a master 
bedroom is determined by local custom. 

BedRoom.Master.lndicator 


Indicator 

Enumeration 

Unknown 

Unknown indicates that neither condition (Yes or No) can be determined. 





Yes 

Indicates that this feature does exist. 





No 

Indicates that this feature does not exist. 

BedRoom. Master.Dimensions 

Dimensions 


Text 

The room dimensions. This SHOULD be expressed as a text string 
consisting of one or more numeric quantities giving the linear distance 
between vertices of the polygon enclosing the space and separated by white- 
space and the letter "x". 

BedRoom.Master.Length 

Length 


Numeric 

The rooms length. Represented as a number. 

BedRoom.Master.Length.Units 


Units 

Enumeration 

Feet 

The length is expressed in feet. 





Meters 

The length is expressed in meters 





Acres 

The length is expressed in acres. 





Hectares 

The length is expressed in hectares 

BedRoom.Master. Width 

Width 


Numeric 

The rooms width. Represented as a number. 

BedRoom.Master. Width.Units 


Units 

Enumeration 

Feet 

The length is expressed in feet. 





Meters 

The length is expressed in meters 





Acres 

The length is expressed in acres. 





Hectares 

The length is expressed in hectares 

BedRoom.MasterArea 

Area 


Text 

The rooms geometric area expressed in the given units. Numeric areas are 
preferred; the "TEXT 1 unit is deprecated. 

BedRoom.Master.Area.Units 


Units 

Enumeration 

SqFeet 

An area measurement specified as per SqFeet. 





SqMeters 

An area measurement specified as per SqMeters. 





Acres 

An area measurement specified as per Acres. 





Hectares 

An area measurement specified as per Hectares. 

BedRoom.Master.Area.Type 


Type 

Enumeration 

Integer 

The area is expressed as an integer number of units 





Float 

The area is expressed as a floating point number. 





Text 

The area is expressed as a text string that can not be usefully interpreted as a 
number. 


Figure 4. RETS common fields (From Real Estate Transaction Standard, 2009) 


The travel industry is a third example of a dependent supply chain of 
private firms in which data standards are involved in information sharing. 
Individual customers, travel agencies, lodging and transportation providers, as 
well as their supply chains, rely on the information shared between firms. This 
sharing is best observed in the use of on-line travel tools when passengers 
personally search for their preferred itinerary. Data standards enable these 
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exchanges and standards organizations like the OpenTravel Alliance 
(OpenTravel, 2009b), which have aided in their creation. The OpenTravel 
standards enable inter-organizational information sharing, as well as enhance 
end user or point of sale (POS) capabilities. The OpenTravel standards are used 
to carry tens of millions of messages between firms each day (OpenTravel, 
2009b). Figure 5 shows the OpenTravel data standard for air travel flights when 
origin and destination are available. 

ORIGINDESTINATIONINFORMATION 



Parents 


Ail Results 
Ail Seal ch 
OTA.AMAvailRO 
OTA.AiiAvailRS 
OTA_Aw Fai eDisplayRO 
OT A_Aii Lo wFai eSeai cliRO 
OT A_A« SclieduleRO 
RailAvaillnfo 


[Elements 

t^Auiv.ilDateTnne 

The arrival date and optionally a time period that can be applied before and/or after the arrival date Specifies a time window 

ConnectiouLocatioiis 

Travel Connection Location - for example, air uses the IATA 3 letter code To specify connection locations, preference level for each, 
mm connection time, and whether location is specified for stopping or changing. 

Depot tin eDateTime 

The departure date and optionally a time period that can be applied before and/or after the departure date Specifies a time window 

t^De$1iii<itioiiLoc<itioti 

Travel Destination Location - for example, air uses the IATA 3 letter code if true, other airports within this city may be considered (i e. 
EWR, JFK when origin location is LG A) 

^OiHjNiLocatlon 

Travel Origin Location - for example, air uses the IATA 3 letter code If true, other airports within this city may be considered (i e, 

EWR, JFK when origin location is LGA) 

SpecIficFttylrtlnfo 

To specify a flight for this origin and destination for which availability is to be checked indicates if the actual inventory information 
needs to be returned for a specific flight 

TtarvelPiefeiences 

Traveler preference information for this particular origin and destination Defines user preferences to be used in conducting a 
search 


Attributes 

RPH 

Uniquely Identifies this origin destination information The Reference Place Holder (RPH) is an index code used to identify an 
instance in a collection of like items (e g used to assign individual passengers or clients to particular itinerary items) 

SomeAiipoitliMl 

if true, the return departure must be from the same airport as the outbound arrival 


Figure 5. Origin Destination Information (From OpenTravel, 2009b) 


D. PUBLIC SECTOR DATA STANDARDS 

Data standards are not only utilized in the aforementioned private sector 
examples, but also exist in the public sector as well. The public safety 
community, in particular the criminal justice community and the geospatial 
community in the United States, rely on data standards to enhance information 
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sharing. For the criminal justice community, NIEM has grown from being criminal 
justice specific to including other public safety exchanges. In addition, like the 
NIEM, the Federal Geographic Data Committee provides similar standards for 
government geospatial and mapping organizations. 

NIEM, the data standard used in U.S. criminal justice, emergency 
management and intelligence fields, was built upon the Global Justice Extensible 
Markup Language (GJXML) data standard (partially shown in Figure 6). NIEM 
version 2.0 has expanded beyond public safety and criminal justice to include 
standards for emergency management, geospatial, immigration, intelligence, 
infrastructure protection, international trade, passenger and cargo screening, 
biometrics, and other customers (Bureau of Justice Assistance, 2007). 


Peison 

PeisonTvpe 

Describes inherent and frequently associated characteristics o 


ISiipeiTypet 

a person. 

PersonName 

PersonNameTvoe 

fSuperType) 

A name by which a person is known 

PersonPrefixName 

TextType 

A title or honorific used by a person, e g , Dr, Judge, General, Ms 

PersonGivenName 

PersonNameTextTvDe 

(TexfType) 

A first name of a person 

PersonMiddleName 

PersonNameTextTvDe 

(TextType) 

A middle name of a person 

PersonSurName 

PersonNemeTextTvBe 

(TextTvoe) 

A last name or family name of a person 

PersonSuffixName 

TextType 

A component that is appended after the family name that 
distinguishes members of a family with the same given, middle, and 
last name, (e g., Jr, Sr, III), or otherwise qualifies the name (e g , 
MD. LLD. PhD) 

PersonMaidenName 

PersonNameTexlType 

(TextType) 

An original surname of a person before changed by marriage 

PersonFullName 

PersonNameTextTvDe 

(TextType) 

A complete name of a person 

PersonNamelnitialsText 

TextType 

A first letter of a person's given, possibly middle, and last names 

PersonNameSoundexText 

TextTvoe 

A name encoding such that similar sounding names with different 
spellings appear the same 

@personNameTypeCode 

nonauth PersonNameTypeCod A code identifying a type of name for a person 

@personNameCommentText 

xsd: string 

A comment about a type of name for a person 

PersonAlternateName 

PersonNameTvoe 

An alternate name used by a person Sometimes referred to as an 


(SpperType) 

AKA 

PersonPrefixName 

TextType 

A title or honorific used by a person, e g , Dr., Judge, General. Ms 

PersonGivenName 

PersonNameTextTvDe 

(TextType) 

A first name of a person 

PersonMiddleName 

PersonNameTextTvDe 

(TextType) 

A middle name of a person 

PersonSurName 

PersonNameTextTvDe 

(TextType) 

A last name or family name of a person 

PersonSuffixName 

TextTvoe 

A component that is appended after the family name that 
distinguishes members of a family with the same given, middle, and 
last name, (e g . Jr, Sr, 110, or otherwise qualifies the name (e g , 


Figure 6. Global Justice Extensible Markup Language (GJXML) data standard 
(From U.S. Department of Justice, Office of Justice Programs, n.d.). 
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The Federal Geographic Data Committee (FGDC) creates data standards 
for U.S. government agencies for handling geospatial data. Figure 7 shows a 
segment of the FGDC’s data standard for rail specific geospatial data. These 
standards allow the 28 federal agencies and departments to share information 
between their organizations, as well as with non-federal partners, such as state 
and local governments and private firms (Federal Geographic Data Committee, 
2009). Each of these organizations requires different qualities in mapping and 
geospatial data, and these data standards allow for the differences. For instance, 
the Department of the Interior (DOI) is able to share data with the Environmental 
Protection Agency (EPA). The EPA may be interested in the water shed or runoff 
specifications of satellite data, while the DOI may be interested in the runoff 
specifications for an irrigation issue on an American Indian reservation. In this 
example, both organizations require geospatial data but for different reasons. 
These data standards allow these organizations to use one language when 
exchanging this information. 


Line 

Name/Role Name 

Definition 

Obligation 

Condition 

Maximum 

Occurrence 

Data Type 

Domain 

46 

RailSeg 

Linear section of a physical 
transportation system desiqned for 
ra-l road movement 



«Feature» 

Lines 47-65 

47 

owner 

Person(s) or organization^) that 
possess RailSeg 

O 

* 

«DataType» 

Owner! nformation 

Unrestricted 

48 

inServiceDate 

Date the RailSeg was placed into 
service 

O 

1 

Date 

Valid historical or current 
date and time 

49 

cxjtOfServiceDate 

Date the RailSeg was taken out of 
service 

O 

1 

Date 

Valid historical or current 
date and time 

50 

isAlignment 

Denotes whether or not the RailSeg 
is an Alignment 

O 

1 

Boolean 

True or False 

51 

islnService 

Denotes whether or not the RailSeg 
is in service 

M 

1 

3odean 

True or False 

52 

startingMileage 

Mile at which the RailSeg begins 

O 

1 

Number 

Real Numbers 

53 

endingMileage 

Mile at which the RailSeg ends 

O 

1 

Number 

Real Numbers 

54 

isFerry 

Denotes whether or not the RailSeg 
represents a Ferry crossing 

O 

1 

Boolean 

True or False 

55 

Transportation Base:: 
TranSeg:status 


M 

1 

Characterstring 

Unrestricted 

56 

Transportation Base:: 

TranSeg: fieldMeasure 


M 

1 

Measure 


57 

Transportation Base:: 

TranSeg: length 


M 

1 

Measure 


58 

Transportation Base:: 

T ranSeg: :geometry 

Shape and geolocation of a feature 

O 

• 

«Type» 

GM_Curve 

Defined in ISO 19107 


Figure 7. Geographic Information Framework Data Standard for Rail Sector 
(From Federal Geographic Data Committee, 2013) 
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These private and public sector examples illustrate how data standards 
can enhance inter-organizational information sharing. In addition to data 
standards, process standards also assist in the sharing of information. These two 
standards complement one another—the data standards provide information¬ 
sharing partners with a standard language on what data elements will be shared, 
while process standards provide guidelines on how the data will be used. 

E. PROCESS STANDARDS 

Process standards are reliant on underlying data standards and came into 
being through a multi-organizational collaborative process to enhance inter- 
organizational information sharing further. Three such process standards, or 
protocols, are illustrated by the means of processing electronic mail, the 
communication of alerts and emergency announcements to the public, and the 
process of utilizing online travel sites for making online travel reservations. 

Internet standards are formed as a result of the request for comment 
(RFC) process. The RFCs are reviewed and, if approved by a number of groups, 
become accepted standards for how the Internet will function. In August 1982, 
RFC 821 was published (Postel, 1982). The subject of this particular RFC was 
Simple Mail Transfer Protocol (SMTP). This messaging exchange standard 
(revised many times since 1982) along with others like Post Office Protocol 3, 
better known as POP3, enable inter- and intra- organizational electronic mail 
exchanges. The data elements contained within the standards instruct the 
servers where to route messages (Postel, 1982). Another similar protocol is 
found in Common Alerting Protocol (CAP). 

Government, as well as private organizations, use CAP to inform the 
public of on-going emergencies or emerging hazards. For example, weather- 
related alerts are authored using this protocol and the systems within media 
outlets (radio, television, Internet, etc.) automatically interrupt the broadcast and 
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supply the public the message (see Figure 8 for CAP data fields), which is 
performed without human interference or approval, rather via agreed upon 
process standards (Oasis, 2005). 


Message 10 :'dertre r i 
Sender ID (sender) 

Sent Dsl&TImH (eeciI) 
Statue :Btd1us) 

Scope (scape) 

Type [rfiEcTyp-ej 
Password i ipsssivwU) 

Di lEfarcrDetfoe !€• i^CL'.'ce.i 
R&SfTcn'sfj |'i r e5L r itffi;YiJ 
A H r £ s s es [ a M/Esse i. 
Hanflttng CcJe ' itcces. 

NOlS i'COIE; 

iG pSftefEes) 
Jnc&fcnr IDs (JncKenis) 


EemEnlB in hold are 
man da: cry t"cse in iiatics 
areoplicna : asterisk\'; 
inc cates multiple nslances 
pemirttec 


Event T ype (event; 

Urgency (urgency) 

Seventy (seYEftlyi 
CHrtalnty ;ceta Tty) 

Eren; Cars pin,- ' (category) 
iacpLsge (YaTguape; 

ALHftlence (au&ence) 

T’e.'psnrg C:Je ' I'tvenfCacey 
BTeAVe Lare. h'ns (efflectiVieJ 
Onset CateTBne ftioser) 
Expiration Date-Urns ^pVepI 
S=rc=r rvartE |'’3ef)derwane^ 
WtaJitne ■', 1 eeiVney 
EVertt Descrfljfar; flestv^BanJ 
.'.nseticr.svis (.WsruoPcnJ 
!.i f a r ciatfoi UFL iTvepj 
Cs.nncrinrs iPoriact) 
Pa r a , 7'ere. r ’ (|ps rams terJ 


reEctrce 

Dsacrlptlcn (rEsourceDeEci 
MIME Type fmlmeT)pej( 
S£e i 
■Lift . 1 fijijj 
G^e:; I'c.'gtar.i 



Area Description (arsaDesc 
■ J , r ea Pc.'/c;. - -' ipclypcnj 
■ J , r ea FoVir-arxi-Padlus ■ fetraflej 
Geographic Cac=' (gearaHeJ 
J.r.TjJe fafiSade; 

CeflVtj certtug)' 
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Another process standard, used by the OpenTravel Alliance’s project, 
named FastRez, is illustrated in Figure 9. Using FastRez, the OpenTravel 
Alliance depicts how four processes (availability, reservation, reservation 
retrieval, and cancellation) are communicated between organizations. These 
processes enable hotels of any size to participate in information sharing between 
consumers, travel agencies, and online travel services (Open Travel, 2009a). 
Global Distribution Systems (GDS) is the name of the class of software utilized to 
facilitate information exchanges in the travel industry. These systems use 
process standards that allow information about a reservation, such as schedule, 
price, and accommodation types to be shared with travel agencies and travelers. 
Online consumer travel services, like Expedia.com, use GDS to communicate 
with hotels, airlines, and car rental companies (Radulovic, 2013). 
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Availability 


Reservation 


Reservation 

Retrieval 


Cancellation 


Distributor 


Hotel 


Request Hotel 
Availability 

Input hotel code or hotel 
city code and additional 
criteria 



Return Hotel 
Availability 

Return available rates 
that match the criteria 
requested 


Book Reservation 

Input hotel, rate, guest, 
and guarantee 
Information 


Request 

Reservation 

Retrieval 

Input confirmation 
number and guest 
last name 


' > 

< 1 

' > 

< ' 


Return 

Reservation 

Return confirmation 
number and the details 
of the reservation 
booking 


Return 

Reservation 

Return the details 
of the guest reservation 


Cancel 

Reservation 

Input confirmation 
number and guest 
last name 



Return 

Cancellation 

Return cancellation 
number and the details 
of the cancellation 


Figure 9. Open Travel Alliance—Fast Res System Flow (From Open Travel, 

2009a) 


Data and process standards allow both private and public organizations to 
use their intra-organizational tools while participating in inter-organizational 
information sharing. Information sharing tools are present in many industries to 
include those within the public sector. These tools can range from client-server 
applications to web-browser interfaces to shared data. Several of these tools are 
outlined in the next section. 

F. PRIVATE SECTOR INFORMATION SHARING TOOLS 

Private and public organizations have turned to technological tools to 

enhance inter-organizational information sharing. For the private sector, these 

tools can provide a gateway to B2B collaboration, and within government, these 
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tools enable sharing of information between agencies and departments. Some of 
these tools require a strong coupling between firms where two or more 
organizations use a common interface to exchange information on a particular 
project or product. Other information sharing tools are built to enable inter- 
organizational sharing by relying on data and process standards to govern 
information exchanges. 

EDI has been used in inter-organizational information sharing, and in 
particular, within private sector supply chains. EDI is data and process standards 
based on information exchanges between partners (Dismukes & Godin, 1997). 
These exchanges are used to enable electronic exchanges between 
organizations on shipping, purchasing, payments, and other routine business 
processes (Attaran & Attaran, 2007). The Internet has improved EDI and reduced 
the necessary hardware from requiring a client server type solution to needing 
only a web browser (Attaran & Attaran, 2007). Some European travel and 
tourism organizations use an EDI to share information. 

Based on data standards and an agreed business process, the Tourism 
Harmonisation Network (THN) provides a weak coupling between participants. 
Each organization supplies the availability of their resources to the THN and 
consumers or travel organizations can then query it based on their particular 
needs (Fodor & Werthner, 2004). Figure 10 graphically depicts the THN 
information-sharing model. In this structure, participants can use their in-house 
information management systems and still participate in a larger information¬ 
sharing network. Each participating organization shares a common set of data 
elements, which provide a common set of search or inquiry formats for the 
consumer. Fodor and Werthner (2004) write the following in their work on e- 
tourism and B2B collaboration in the marketplace. 

The philosophy is to allow participating organizations to retain their 
proprietary data formats and simultaneously cooperate with one 
other, exchanging information in a seamless manner. Participants 
receive data from their partners as if they were extensions of their 
own systems, (p. 16) 
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The travel industry uses a class of software called GDS and software 
suppliers have constructed tool sets to enhance information exchanges. Another 
example of a private sector information sharing tools in the travel and tourism 
industry is the Amadeus Cars solution. This tool, utilizing the data standards from 
OpenTravel Alliance, provides XML-based messaging for rental car providers 
(Amadeus, 2009). Amadeus, a private firm itself, provides this linkage to the 
travel and tourism industry. GDS suppliers Pegasus and WorldSpan supply tools 
to Expedia, which enable the traveler to search multiple airline, car rental and 
accommodation information simultaneously, based on the traveler’s requirements 
(Expedia, 2013). These tools enable the sorting and filtering of results by price, 
schedule, provider, and other sometimes, other criteria. Another industry in which 
inter-organizational information sharing is paramount is the large retailer supply 
chain. 

Some supply chains use tightly coupled inter-organizational information 
sharing tools. The CRP is one type of tool that two firms use to collaborate 
tightly. One example of a CRP system is the reordering process between a 
retailer and wholesaler. The two firms’ inventory and ordering systems are linked 
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and automatically share information while acting upon pre-defined rules. Once 
the first order has been placed, terms have been agreed upon, and the inventory 
and ordering systems have been linked between firms, the CRP automatically 
shares information that results in the replenishment or reordering of the item 
(Attaran & Attaran, 2007). This system is an example of tightly coupled 
collaboration between firms and not only can be seen in the private sector, but 
also in the public sector. 

G. PUBLIC SECTOR INFORMATION SHARING TOOLS 

The public sector, in particular public safety organizations, uses inter- 
organizational information tools to enable sharing. Many of these tools are built 
on data and process standards. Some examples include the National Crime 
Information Center (NCIC), HSIN, and LEO. 

1. National Crime Information Center (NCIC) 

The NCIC is a computer-based database containing criminal justice 
records made available to law enforcement agencies nationwide. Examples of 
the information contained in these records include criminal histories, warrants, 
stolen property, and missing persons, just to name a few. Federal, state and local 
criminal justice agencies are able to populate the database, as well as make 
inquiries. Although the FBI maintains the host computer, the NCIC functions 
under a shared management concept, which includes other federal and state 
criminal justice agencies (U.S. Department of Justice, 2005). Operating 
procedures outlined in NCIC policy allow for system security and quality control. 

2. Homeland Security Information Network (HSIN) 

The HSIN brand is divided into two parts, HSIN and HSIN-Intel. The larger 
HSIN is devoted to information sharing within the public safety community, which 
includes law enforcement, emergency management, critical infrastructure, and 
others. The HSIN-Intel program serves the state and local fusion center 
community. Both programs are web portals with document libraries and 
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embedded communication capabilities. The portals are searchable, and in the 
HSIN-Intelligence portal, advanced storage abilities exist to limit document 
audience. In addition to document sharing, as well as secure messaging and 
chat, other features are also available. The HSIN offers a situational awareness 
tool called the COP and has integrated mapping capability through the iCAV. 
Both the COP and iCAV require the participating organization to login and enter 
their agencies’ information into these unique portals. 

3. Law Enforcement Online (LEO) 

An initiative in the DOJ for information sharing is LEO. LEO operates 
similar to HSIN and provides some of the same functionality by offering secure 
messaging and mission specific online portals for communities of interest to post 
information. LEO’s encryption package is used to verify users of other systems, 
such as N-DEx, and operational law enforcement deconfliction systems. In 
addition to web portals, LEO offers encryption for access to the national 
deconfliction network (RISSSafe) and VCC, which is a web-based incident 
management tool (U.S. Government Accountability Office, 2007). 

H. CONCEPTUAL MODEL (NATIONAL INTELLIGENCE SHARING MODEL 

NISM) 

Public safety organizations are constantly collecting information on 
situations, people, and places while performing their jobs. All too often, this 
information is stored inside an organization’s data systems and not shared with 
peer agencies. The following model is built upon inter-organizational information 
sharing strategies from private and public organizations, and strives to improve 
information exchanges in the local, state, and federal arenas. As this literature 
explains, some of this work has already been accomplished, and provides a 
strong basis for the proposed model. For instance, some public sector data 
standards are in effect, and the NIEM and GJXML standards, are great 
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foundations upon which to build. Now, the standards already established must be 
applied to the domestic intelligence effort to enhance the RFI and situational 
awareness reporting processes. 

The three elements outlined in this literature review (data standards, 
process standards, and information tools) are necessary for inter-organizational 
information sharing between domestic intelligence organizations. State and local 
fusion centers each have their own tools used for intra-organizational information 
sharing. Centers have databases, web portals, and other tools to share 
information within the center. Additionally, the centers are constantly processing 
information requests and since the data standards are in place, the next step is 
formalizing information sharing processes by modeling them after those used in 
the private sector among supply chains, for example. 

This work focuses on four routine functions performed by state and local 
fusion centers: 1) request for information, 2) request for information reply, 3) 
situation report, and 4) situation report update. These four functions are detailed 
as follows in conceptual models. 

I. FOUR CONCEPTUAL MODELS 

The RFI model will consist of the following fields. 

Organizational Information 

• Agency, Fusion Center, etc. 

Requestor & Contact Information 

• Individual agent, officer, analyst, etc. 

• Phone Number 

• Email Address 

Subject Biographical Information 

• Name 

• Date of Birth 

• Social Security Number 
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Criminal Predicate 

• Associated or suspected criminal activity 

Narrative 

• Brief background information 
Sharing Controls 

• Dissemination & Sharing Limits 
Data Security Classification 

• 28CFR 

• For Official Use Only 

• Law Enforcement Sensitive 
Time Requirements 

• Exigent 

• Routine 

The RFI reply model will consist of the following fields. 
Organizational Information 

• Agency, Fusion Center, etc. 

Submitter Contact Information (if human processed) 

• Individual agent, officer, analyst, etc. 

• Phone Number 

• E-Mail Address 

Similar or Same Subject Biographical Information 

• Name 

• Date of Birth 

• Social Security Number 
Criminal Predicate 

• Associated or suspected criminal activity 
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Narrative 


• Brief explanation of information contained within the system 
Sharing Controls 

• Dissemination & Sharing Limits 
Data Security Classification 

• 28CFR 

• For Official Use Only 

• Law Enforcement Sensitive 


The situation report model will consist of the following fields. 

Organizational Information 

• Agency, Fusion Center, etc. 

Submitter Contact Information 

• Individual agent, officer, analyst, etc. 

• Phone Number 

• Email Address 
Situation Type 

• Explosion, evacuation, suspicious activity, etc. 
Original Jurisdiction 

• Identity of local jurisdiction 
Location 

• Address & Coordinates 
Persons Involved 

• Deaths, Injured, Displaced, etc. 


Narrative 

• Brief background information 
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Sharing Controls 

• Dissemination and Sharing Limits 
Data Security Classification 

• 28CFR 

• For Official Use Only 

• Law Enforcement Sensitive 

• Open Source 

The situation report update model will consist of the following fields. 

Organizational Information 

• Agency, Fusion Center, etc. 

Submitter Contact Information 

• Individual agent, officer, analyst, etc. 

Situation Type 

• Explosion, evacuation, suspicious activity, etc. 
Original Jurisdiction 

• Identity of local jurisdiction 
Location 

• Address & Coordinates 
Persons Involved 

• Deaths, Injured, Displaced, etc. 

Narrative 

• Brief background information 

Status 

• Continuing or Closed 
Sharing Controls 

• Dissemination and Sharing Limits 
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Data Security Classification 

• 28CFR 

• For Official Use Only 

• Law Enforcement Sensitive 

• Open Source 

The data modules will be used in the following way. 

The conceptual model, as depicted in Figure 11, shows how the flow of 
information is routinely processed by a state and local fusion center. These 
processes can take place many times each day. 
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Figure 11. Conceptual Model 
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Using this model, the fusion center receives a RFI from a local police 
department on a subject who is suspected of being involved in criminal activity. 
The fusion center employee enters the call into the in-house system and begins 
searching databases available directly in the center. Using the established 
standards, the RFI is shared with the fusion center network and appears in each 
center’s in-house systems as a new RFI regardless of what tools are being using 
to manage incoming requests. As these replies are received by the original 
center, they are threaded together under the original request. In addition to the 
RFI and RFIR processes, reporting on current situations is a routine fusion center 
function. In this example, a local emergency management organization reports to 
the fusion center that an aircraft has crashed in its jurisdiction, and it is 
responding to the crash site. This information is collected in the fusion center in- 
house information system, and when appropriate, is shared as situation reports 
with the other centers in the nation. These centers receive the information in their 
in-house system. When new information is received, such as fatalities or whether 
the aircraft is a commercial or pleasure, this information is shared using the same 
method as the original, and the updates append the original in the same way the 
RFIs are threaded together. 

J. CONCLUSION 

Data standards, process standards, and information-sharing tools are 
used in private and public organizations. Inter-organizational information sharing 
can benefit from these standards and tools. The public sector uses data 
standards to communicate criminal justice data and share geospatial information, 
and the private sector uses data standards to sell goods and share information 
with trading partners. Process standards are used in exchanging electronic mail 
and sharing public safety alerts. In addition to standards, information-sharing 
tools are used in public and private organizations. These tools are used in the 
travel and tourism industry, and inside supply chains. The public sector, in 
particular fusion centers, has information sharing tools like LEO and HSIN to aid 

in inter-organizational information sharing. This work builds on these standards 
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and tools to create a standards-based inter-organizational information sharing 
conceptual model for fusion centers to exchange RFI and situation reports. 
These routine fusion center business processes could benefit from this 
enhancement. 
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III. METHODOLOGY 


A. METHODS 

This thesis conducts a secondary analysis of the literature on data and 
process standards, and tools in the private and public sectors to build an 
idealized model, the NISM, or framework for conducting RFIs and providing 
situation reports. As set of evaluation criteria commonly used in the public and 
private sector was obtained from a group for SME. The author used those criteria 
along with existing literature to evaluate the proposed model. Between the 
literature available on private and public inter-organizational information sharing, 
a solid enough foundation is available to present a conceptual model. Coupling a 
literature review and interview validation process presents the best option for this 
project. 

B. SAMPLE 

The literature review includes scholarly journals on information 
technology, Internet sources, and websites. These sources were reviewed for 
publications and documentation on data standards, automated business 
processes, information sharing, and B2B information sharing. To validate the 
potential effectiveness of this model, qualitative interviews were conducted with 
individuals knowledgeable in the field of fusion centers. Interviews were 
conducted with an individual in a leadership position in the U.S. DHS Intelligence 
and Analysis Directorate, the former director of a mission-specific fusion center in 
the Defense Intelligence Agency, a state fusion center director, and a fusion 
center consultant from a technology firm. 

C. DATA COLLECTION 

Publications were gathered with relevance to data and process standards 
and information sharing tools. These publications exist in information science 
journals and public websites. The sources of the literature include industry 
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publications, studies on inter-organizational information sharing in private 
organizations, in particular supply chains, and government websites and 
publications. This literature was analyzed for application to the fusion center RFI 
and situation reporting process. Applicable concepts were included in the 
proposed model and provided to persons familiar with the U.S. fusion centers. 
The process consisted of conducting semi-structured interviews referencing the 
model to obtain feedback on the framework validity. Validity concepts include 
organizational and process fit. Based on those interviews, adjustments or 
modifications to the model are suggested. 

D. ANALYSIS 

Qualitative analysis of both the literature and interview data was 
performed to develop a model or framework for RFI and a national shared 
situational awareness. The results of the interviews were thematically mapped to 
enable the identification of common themes in the way of suggestions, 
comments, or other information gleaned from the interviews. These results were 
analyzed for inclusion into model adjustments or enhancements. 

E. INTERVIEW QUESTIONS 

Given the proposed conceptual model, the NISM, for enabling the fusion 
center RFI and situation reports business process, the following questions were 
asked: 


Interview Question 1: Considering the NISM: How could public and private 
sector standards be leveraged to enhance the national distribution 
of situation reports and RFI’s? 

Interview Question 2: Considering the NISM: How could public and private 
sector processes, such as continuous replenishment programs in 
supply chains be leveraged to enhance the national distribution of 
situation reports and requests for information? 

Interview Question 3: Considering the NISM: What is the role of tools in 
supporting domestic information sharing with respect to request for 
information processing and sharing situational awareness? 
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Interview Question 4: Would the NISM allow for more time for fusion 
centers to focus on strategic intelligence needs? 

Interview Question 5: What challenges do you see in implementing such a 
concept? 
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IV. ANALYSIS / INTERVIEWS 


Four SMEs were provided the conceptual model and an explanation of the 
use cases. Those interviewed included Van Godsey, the Missouri state fusion 
center director, Pat Duecy, the former director of the Defense Intelligence 
Agency (DIA) Joint Intelligence Task Force-Combating Terrorism (JITF-CT), Bart 
Johnson, the Principal Deputy Under Secretary within the (DHS) Intelligence and 
Analysis Directorate, and David Waldrop of Microsoft. Each of the participants 
was asked the same questions in the same order and several key themes were 
observed in their responses. 

A. INTERVIEW QUESTIONS 

The first question asked about the need for standards in processing RFIs 
and situation reports. The experts agreed that standards would be helpful and 
that trust was important to building information sharing systems. In particular, one 
interviewee commented that trust and strong relationships would be a 
prerequisite. The second question surrounded the use of process standards like 
those utilized by some supply chains for automatic reordering. Respondents felt 
that dissemination controls and information assurance would be concerns for 
implementation. The next question asked about the role of tools and each 
answer expressed the importance of tools. Some interviewees thought the 
information was too voluminous, while some thought too many disconnected 
tools were available. The fourth question assumes efficiencies in information 
exchanges would result in extra time for other duties, such as strategic 
intelligence. All respondents believed most of the work being done in a fusion 
center is tactical, and while one put a figure on the amount, another said little 
strategic thinking is happening. The last questions asked about the challenges 
for implementing the NISM. Participants felt two issues would be present, (1) 
skepticism, and (2) power and control issues. 
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Interview Question 1: Considering the NISM: How could public and private 
sector standards be leveraged to enhance the national distribution 
of situation reports and RFIs? 

Two distinct themes emerged from the responses to the first interview 
question. To begin with, the answers expressed the necessity of data standards. 
Van Godsey, a state fusion center director, stated, “standards are important and 
vendors, contractors and information technology shops are accepting this” 
(personal communication, October 12, 2009). 

Where the interviewees differed on this theme was in their feedback as to 
whether or not the public sector already has the appropriate framework for data 
standards. Two experts articulated that the public sector presently has standards 
in place for the model to utilize. One of these interviewees proposed the NIEM 
could be leveraged to enhance distribution. The other two experts suggested it is 
necessary to look to the private sector for ideas and guidance, and suggested 
that it may have already solved many of the information sharing problems faced 
by the public sector. Technology consultant and Microsoft employee David 
Waldrop commented that the data standards are not the first step but rather a 
necessity to enable technology (personal communication, October 14, 2009). He 
added that the standards should emerge and that it should not be assumed it 
could be designed (personal communication, October 14, 2009). 

Pat Duecy, who formerly led counter-terrorism intelligence for the DIA, 
responded specifically that data standards for issues like naming fields of 
structured data fields are important. He added data standards should appear in 
both the RFI and situational reporting process (personal communication, October 
13, 2009). Pat Duecy also stated that the people doing the work must lead the 
effort to explain the standard(s) for subsequent delivery to information technology 
personnel rather than the other way around (personal communication, October 
13, 2009). Van Godsey built on this concept stating the user community would 
need to be very involved throughout such an implementation (personal 

communication, October 12, 2009). He continued the field names, whether they 
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are required or not, and issues like that would need to be discussed and 
approved by the organizations using the standards. Both Pat Duecy (personal 
communication, October 13, 2009), and Van Godsey (personal communication, 
October 12, 2009) commented if organizations already had an adopted data 
standard implemented, the homeland security community would be able to move 
the data more easily. 


Interview Question 2: Considering the NISM: How could public and private 
sector processes such as continuous replenishment programs in 
supply chains be leveraged to enhance the national distribution of 
situation reports and requests for information? 


Process standards would be needed to implement the model (Van 
Godsey, personal communication, October 12, 2009). 

As in the first question, all the experts believed a role existed for process 
standards, and specifically thought the concept of utilizing standards similar to 
CRP in supply chains could have merit in this construct. David Waldrop in the 
following narrative stated that automatic feed could be generated by the fusion 
center, and consumed by the fusion center for purposes of aggregating RFI and 
sharing situational reports (personal communication, October 14, 2009). 

Every partner who we have agreed to share information with is 
allowed access to our feed and vice versa. We would all agree to 
the rules of use for the information and agree on what information 
what shared etcetera. Like the first question on data standards the 
process standards would need the ability to evolve and adjust to 
the operating environment, changes in information, roles and other 
considerations. 

Bart Johnson of the DHS l&A also mentioned that the process standards would 
create an assuredness that the information would be handled appropriately by all 
the organizations involved (personal communication, October 14, 2009). Pat 
Duecy said the process standards would first need to be agreed upon business 
rules by all organizations involved in the process (personal communication, 
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October 13, 2009). Then, they could be translated to rules within machines to aid 
in automating the process. 

Interview Question 3: Considering the NISM: What is the role of tools in 
supporting domestic information sharing with respect to request for 
information processing and sharing situational awareness? 

In one way or another, all interviewees expressed the importance of 
information sharing tools in the model. “Tools allow the massive volume of 
information to be analyzed and allow data to be managed much, much quicker 
than a human mind,” (personal communication, October 12, 2009). Van Godsey. 
Van Godsey further stated that you “have to have tools,” and “tools can enable 
analysis through the use of timelines, link charts, mapping much quicker than the 
pace of a human” (personal communication, October 12, 2009). Also, tools allow 
for internal and external communication within, and between, agencies. The need 
for security and encryption tools was also expressed, as well as concerns 
regarding integration and confidence in the interviews. Bart Johnson suggested 
that one role for the tools would be to aid in the prioritization of information 
(personal communication, October 14, 2009). Since the tools are reading 
standards-based information, rules established could be established that route 
information, and alert organizations and individuals to specific issues. Pat Duecy 
built on this concept by adding the tools could help collate similar situational 
reports and show connections in information being exchanged (personal 
communication, October 13, 2009). Pat Duecy suggests that one key role for the 
tools would be to aggregate the information and visualize it in multiple fashions 
for the users (personal communication, October 13, 2009). 

The distinct separation between the tools and the data standards allows 
for employing different sets of tools, but government agencies will not participate 
if tools are poorly integrated. The tools, specifically technology tools, are the 
enablers of the process standards as explained by David Waldrop’s expression, 
“just because you can buy an 18-volt Makita drill does not mean you can hang 
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kitchen cabinets” (personal communication, October 14, 2009). The drill will not 
hang the cabinets alone and possessing it will not make someone a craftsman, 
just as the information sharing tools are not actuating the information sharing; 
rather, they are facilitating its occurrence. 

In addition to the apprehension of proper integration, confidence in the 
tools was also discussed. Agencies may question if communication issues will 
arise when an incident or situation is occurring, and must be certain these tools 
will handle all events without overloading the system. These agencies must also 
be confident that, in the event of numerous significant incidents developing in a 
short time period, the tools will “contribute to the solution, prioritization and 
handling of the information overload” as dictated by Bart Johnson (personal 
communication, October 14, 2009). Assurance has to be provided that the 
information and alerts are circulated, received, updated, and closed out; and 
tools can aid in that process. 

Interview Question 4: Would this model allow for more time for fusion 
centers to focus on strategic intelligence needs? 

A common denominator echoed in the respondents’ answers is fusion 
centers spend a majority of their time and focus on tactical needs rather than 
intelligence needs. Van Godsey deducts “fusion center employees spend 80 to 
85 percent of their time with tactical intelligence processing, while 15 to 20 
percent of their time is dedicated to the strategic side” (personal communication, 
October 12, 2009). Pat Duecy stressed “very little strategic thinking and critical 
thinking is occurring. This type of thinking takes time and is almost impossible to 
accomplish in an atmosphere where in-boxes are constantly being filled” 
(personal communication, October 13, 2009). Thus, any procedure that takes 
away from the heavily sided tactical response, will add to any strategic needs. 
Both the above noted interviewees speculate the model would allow for more 
strategic intelligence requirements. However, this speculation also assumes the 
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processes and tools are allowing for the automation of generating and collating 
information sharing. 

Although the model may permit increased strategic analysis, the increase 
could result in more hyper-tactical work. David Waldrop introduced this possibility 
in his comparison to the outcome of COP (personal communication, October 14, 
2009). Crime rates escalated when COP was implemented due to the increased 
reporting of crimes as the police were being trusted more than before the 
incorporation of COP. It is possible all the extra time intended for strategic 
analysis would be spent sharing information and, in some ways, less time would 
be available. Furthermore, when the information really begins flowing, less time 
may be free for analysis of any kind. 

Interview Question 5: What challenges do you see in implementing such a 
concept? 

“This is the million dollar question,” noted David Waldrop (personal 
communication, October 14, 2009). He continued, “Why are good ideas not 
implemented? The very entities of government are misguided,” which was 
reflected in the answers of each interviewee. The experts identified several 
challenges that may materialize when attempting to administer the model. These 
potential impediments to implementation can be categorized under three main 
talking points: (1) overcoming skeptics, (2) issues of trust and relationships, and 
lastly, (3) power and control issues. 

Firstly, as Van Godsey stated, “a lot of what we deal with now is 
skepticism, and these skeptics exist due to years of new systems being 
introduced “ (personal communication, October 12, 2009). The mere mention of a 
new system generates feelings of suspicion and wariness. Personnel have 
become weary of new systems and databases largely because of broken 
promises and failed products. New systems were guaranteed to produce said 
results, and after implementation, were found to fall short of expectations, as 
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illustrated by Van Godsey’s observation that “none of the federal government 
systems are producing what was intended” (personal communication, October 
12, 2009). Additionally, some individuals will dislike the machine responses and 
prefer to review the information manually. This particular type of skepticism 
resonates with the trust issues discussed in previous answers and should be 
addressed with agreed upon data standards. Van Godsey added that adoption of 
the standard into everyday practice could be an additional challenge (personal 
communication, October 12, 2009). A last emerging issue, which revolves around 
skeptics, involves forming partnerships between agencies. According to Bart 
Johnson, “we do work well together and there is a need for a strong leader to 
force and form these partnerships. However, with the thousands of agencies and 
their thousands of protocols and procedures, we often revert back to the old 
school notion of not sharing information” (personal communication, October 14, 
2009). This lack of sharing can result in hard feelings and damage existing 
partnerships, and force the process to start all over again. Cynics of the model 
may have experienced these failed partnerships and may caution moving 
forward. 

B. ANALYSIS 

As expressed above, respondents felt that this skepticism has led to low 
levels of trust and damaged relationships. A second issue, which emerged from 
the answers, centered on agency relationships. Regardless of data standards, 
local and state agencies must be involved and trust one another. One suggestion 
is to implement the model and standards first with adjoining states. Most local 
markets already work very well with each other and have established trust. David 
Waldrop asserted, “teams work together because they do not have to spell 
everything out every single time. They trust each other as a single unit. People 
knowing people is what works” (personal communication, October 14, 2009). 
Another interviewee stated the creation of fusions centers has been a positive 
step in the right direction. The model could first be attempted regionally where a 

recognized confidence between state fusion centers occurs, and then could 
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move outwards to connect centers across the nation eventually. Overall, the 
respondents believed that to be successful, mutual assurance must be 
established first, regardless of what standards are employed. Furthermore, the 
issue of trust reappeared in these answers. “There has to be information 
assuredness on both ends,” as stated by Bart Johnson (personal communication, 
October 14, 2009). Recognizing the information will be handled appropriately in 
regards to issues, such as controlling, sharing, and destroying, must be 
accepted. However, having agreed upon data standards may pave the way for 
trust in the processes. As noted by Waldrop, “the effectiveness is not whether or 
not we have a data standard, the magic is what happens on the other end.” 

A third challenge to implementation articulated by the interviewed experts 
examines power and control issues. Questions regarding who will take a 
leadership role over the model were introduced. The respondents also 
recognized these problems might exist specifically between the federal 
government and state agencies in agreements over dissemination and content. 
Pat Duecy states, “there could be political influences to the practices” (personal 
communication, October 13, 2009). Potential solutions to these issues involve 
knowing and respecting the roles and responsibilities of each participating 
agency. “If the role is given to a federal agency, then the model may get bogged 
down versus giving the role to a small group of states for a regionally based 
pilot,” discussed Pat Ducey (personal communication, October 13, 2009). 
Additionally, those organizations that view themselves as aggregators of 
requests for information and situational reporting may fight for control, which 
slows down implementation even further. Power and control issues could also 
stem from the private sector and contractors. Numerous contractors have made 
their living by running and controlling other systems. These individuals may see 
this model as a threat. Likewise, existing information technology personnel may 
feel threatened by the possibility of being replaced or vie for control of the 
system. Specifically as noted by Bart Johnson, there are “too many tools and so 
many different contractors trying to sell something” (personal communication, 
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October 14, 2009). As such, David Waldrop suggests the types of tools in the 
model should not be forced upon the agencies (personal communication, 
October 14, 2009). Instead, existing tools or the agencies’ choice of tools should 
be considered “so that as many people as possible can use the system,” 
Waldrop explains (personal communication, October 14, 2009). 

C. CONCLUSION 

Overall, the four interviews provided some validation of the model, as well 
as some concerns not addressed by this work. Respondents felt trust could be a 
foundational issue with regard to the development of such a model, while 
skepticism about information-sharing programs has grown and could be another 
impediment. While the experts felt data and process standards were important, 
they believed information security and dissemination controls would be important 
to describe as well. All agreed that the majority of time spent in state and local 
fusion centers is focused on the tactical day-to-day operation, with not enough 
focus on strategic intelligence. Some thought integrated information-sharing tools 
could help create free time to address this imbalance. 
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V. FINDINGS, CONCLUSIONS AND RECOMMENDATIONS 


The following is a summary of the key findings from the analysis of the 

interviews. 

A. DATA STANDARDS 

Data standards should be constructed using a ground-up approach and be 
established by the user community. 

The standards should include the fields necessary for exchanges between 
fusion centers, as well as name, date of birth and other biographical 
information. 

The data standards should be built upon existing data standards, such as 
NIEM and GJXML. 

B. PROCESS STANDARDS 

Process standards would be necessary to implement the information 
exchange models. 

Process standards would create assuredness between participating 
organizations that the information is handled appropriately. 

The process standards could be found in the business rules of the 
organizations. 

C. THE ROLE OF TOOLS 

Tools would be necessary to analyze the information. 

Tools can be used to aggregate information and aid in creating 
visualizations, such as link charts, timelines, maps, and others. 

Tools could be used to alert organizations to specific types of information 
via a subscription service. 

D. STRATEGIC WORK 

The entire model would automate the process to the extent the analysts 
and fusion center staff could dedicate more time to other priorities, 
such as strategic intelligence and planning needs. 

Efficiencies created by the model could create a new information overload 
problem for fusion centers that could have the reverse impact. 
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E. IMPLEMENTATION ISSUES 

Need to overcome the skepticism that exists today among fusion center 
personnel who have been oversold and underdelivered with regard 
to information sharing initiatives. 

Trust and damaged relationships would need to be a focus of a successful 
information-sharing implementation. 

Power and control issues would need to be addressed prior to 
implementation. 

F. RECOMMENDATIONS AND CONCLUSION 

Nine years after 9/11, and six years since the 9/11 Commissioners 
released their recommendations, the nation is without a national intelligence 
sharing system. The Commissioners wrote: 

National intelligence is still organized around the collection 
disciplines of the home agencies, not the joint mission. The 
importance of integrated, all-source analysis cannot be overstated. 
Without it, it is not possible to “connect the dots.” No one 
component holds all the relevant information. (National Commission 
on Terrorist Attacks, 2004) 

It is the premise that “no one component [of government] holds all the 
relevant information,” which has triggered the proliferation of information-sharing 
systems. Millions of dollars and several systems later an analyst at a state and 
local fusion center must either call or email a peer in a neighboring state or a 
distribution list in an attempt to gain the national knowledge on a subject or 
situation, which is not an efficient or effective way to share information. The 
private sector, presumably driven by efficiency and profits, has created several 
information-sharing models. Some of these models leverage data and process 
standards and information-sharing tools to enhance information sharing. Two 
routine functions of a fusion center are the processing of RFIs and sharing 
information about on-going situations. Each of these requires data exchanges 
with peer fusion centers and could be enhanced by employing the procedures 
used in the private sector. 
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Building a national information-sharing process for RFIs and sharing 
information about events would require interoperability. This interoperability is 
evidenced in private sector supply chains in which the individual firms use data 
and process standards to aid in the exchange of information between the firms 
and use information-sharing tools to interpret the information. The health care, 
real estate, and travel industries rely on the use of information exchange 
systems, such as EDIs, CRPs, or other types of middleware software to broker 
and route information. The use of CRPs is useful in automating routine 
information exchanges in which set rules or standards can be enforced by 
software. These information-sharing concepts could be transferred to the public 
sector to enable information sharing between domestic intelligence 
organizations, such as state and local fusion centers. 

Interviewees said such an effort would require several key elements, such 
as strong relationships, trust, dissemination and security controls, data and 
process standards, and information-sharing tools. Only then would analysts have 
the time necessary to focus on the strategic intelligence needs of a state or local 
area. As cited in the review of the literature, researchers Cirincione and 
Bacharach (2007) state, “data standards represent agreement” (p. 136). 
Research indicates that data standards would be a necessary step to 
constructing an information-sharing system between state and local fusion 
centers, but a foundational phase of such work would be building trusting 
relationships between the organizations and people involved. State and local 
agencies must focus on building partnerships with the federal government, as 
well as agreeing on universal process standards, both of which require a joint 
effort between all agencies. 

Pat Duecy said it best when he stated, “Business rules (i.e., policies) 
translate to machine rules” (personal communication, October 13, 2009). This 
concept is necessary for publishing and responding to the RFIs, as well as 
handling the dissemination of situation reports. For instance, rules on public 
disclosure and handling procedures for emerging incidents being reported using 
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this tool would need to be constructed and adhered to, as well as when an RFI 
can be distributed and what types of criminal activities are acceptable predicate 
offenses. 

Information-sharing tools are being used by the private and public sector 
to share and process information. Such tools are necessary in the fusion center 
community. As Van Godsey emphasizes, “tools are important; they allow the 
massive volume of information to be analyzed” (personal communication, 
October 12, 2009). However, to do so, the various information-sharing tools 
employed by each fusion center must be integrated and allow for the importation 
and usage of standards-based data from other organizations. 

One tool utilized by the private sector that automates routine information 
exchanges is known as CRP. This concept could be deployed to support the RFI 
processing. This technology would allow a fusion center employee to publish a 
RFI in Illinois. Then, the system would automatically collect the responses from 
all recipient centers, and allow each center to continue using the tools on which 
they are trained. The use of CRP systems builds on the pre-arranged data and 
process standards in the industry. 

However, challenges exist in implementing this conceptual model to 
include overcoming skepticism, and understanding power and control issues. 
Several new information-sharing tools have been deployed in the domestic 
intelligence arena since 9/11, and while these tools have promised a lot of 
functionality and capabilities, they have not delivered. Overcoming the wide 
feeling of doubt that this implementation could actually be accomplished would 
be a considerable hurdle. Issues of who will be in charge of such a system, what 
systems it will “compete” with, funding, and others topics can derail even the best 
plan. Additional research could be conducted on some of these challenges, and 
on which past programs and projects have been successful. 
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G. FUTURE RESEARCH 

Reponses in the interviews outlined other issues, which would require 
further research before the initiation of this concept. The need to understand the 
self-interest of organizational participation would be useful in creating a 
successful implementation. Understanding the implementation issues the private 
sector experienced during the development or deployment stages would be 
useful in mitigating them within the public sector. Researching the barriers and 
facilitators to building trust within similar networks would be a necessary 
foundational work. Considering the privacy and civil liberties issues would be 
necessary as local, state and federal statutes, policies and regulations regulate 
criminal intelligence information sharing. By addressing said issues, and 
continuing to research and experiment with various adaptations of private sector 
data and process standards and information-sharing tools, the public sector at 
the local, state, and federal levels can employ a more efficient means of sharing 
information and combating domestic and international crime threats. 

H. PARTIAL IMPLEMENTATION 

In December 2012, the Homeland Security State and Local Intelligence 
Executive Board proposed and accepted a portion of the situational awareness 
and RFI processing solution. This solution entailed utilizing a software already in 
use within the Homeland Security Information Network to create a virtual 
situational awareness workspace for the fusion center community to share 
information. Given that international terrorists have targeted elections in other 
countries, this communication method was tested on the U.S. national Election 
Day in 2012. Following the Election Day test and usage during some operational 
situations in Illinois, a conference call was conducted with several state fusion 
center directors who had recent experiences in major events. The fusion center 
directors from Colorado (selected because of the July 20, 2012 shooting at a 
theater in Aurora), Connecticut (reference the December 14, 2012 shooting at an 
elementary school in Newtown), and Oregon (selected because of the December 
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11, 2012, shooting at a mall in Portland) participated in the call and were 
surveyed about improving situational awareness reporting during an emerging or 
critical situation. These directors expressed interest in participating in a 
mechanism to share information with peer fusion centers and were encouraged 
about the positive influences this sharing could have on the network of fusion 
centers. The feedback from the personnel involved in recent critical incidents and 
the observations from the operational usage served as the foundation of the 
national situational awareness Adobe Connect site. The national situational 
awareness site or SitAware, as it is commonly referred, was used during the 
February 2013 Christopher Dorner manhunt investigation, and the April 2013 
Boston Marathon Bombings (Figure 12). Both these events validated the need to 
improve information sharing between fusion centers. The full solution, as 
proposed in this thesis project, is not accomplished by the SitAware 
implementation. 
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Figure 12. National Situational Awareness Connect Room—Boston Marathon 

Bombings, April 2013 

The SitAware solution does not use a data standard approach to sharing 
information. Rather, it is reliant on each user posting information in the requested 
format, which creates situational awareness, and incomplete RFI messages (by 
comparison to the proposed data standard model) not in a standard format or 
appearance. The SitAware implementation does create an environment that 
fosters the fusion center community communicating more regularly, and 
especially, in a times of crisis. The SitAware environment was designed and the 
initial implementation was based on the three findings from this work. 

During the interviews for this thesis project, the four SMEs expressed 
implementation concerns. The comments include the following. 
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Need to overcome skepticism due to a combination of overselling and 
under delivering of previous information-sharing solutions 

Need to rebuild damaged trust relationship between the federal agencies 
and fusion centers 

Need to address the authorities, access, and control of the system from 
the beginning. 

Today’s implementation of SitAware included information gathering and 
awareness briefings to the entire fusion center community to address the three 
issues identified. During implementation, other concerns were shared by the user 
community, and enhancements to the technology and policy will be considered in 
the upcoming months. Near-term additions to the SitAware site include the 
inclusions of a RFI template, geographic situational awareness software, and 
other administrative modules. 
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